CVE-2025-62407: Frappe Unvalidated Childquery Key
Unvalidated dictionary keys are directly passed to ChildQuery without validation, which can allow an attacker to inject arbitrary SQL or unsupported SQL functions.
Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0
Python
Pythongreprules fetch cve-2025-62407-frappe-unvalidated-childquery-key --engine opengrepDescription
Unvalidated dictionary keys are directly passed to ChildQuery without validation, which can allow an attacker to inject arbitrary SQL or unsupported SQL functions.
Community feedback
0 signals from signed-in users.
- Useful
- 0
- False positive
- 0
- Metadata
- 0